Advisories · Technology

Fortinet FortiClientEMS.

Every CVE that names Fortinet FortiClientEMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-59836 CVE record

CVSS 6.7 Medium

Improper certificate validation in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Weak cryptography or TLS
Not analysed yet 14 Jul 2026
CVE-2026-39810 CVE record

CVSS 5.2 Medium

Hard-coded cryptographic key in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Hard-coded credentials
Not analysed yet 14 Apr 2026
CVE-2026-39809 CVE record

CVSS 6.2 Medium

SQL injection in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- SQL injection
Not analysed yet 14 Apr 2026
CVE-2026-35616 CVE record

CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Improper access control in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Broken access control
Not analysed yet 4 Apr 2026
CVE-2026-21643 CVE record

CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

SQL injection in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- SQL injection
Not analysed yet 6 Feb 2026
CVE-2025-59922 CVE record

CVSS 6.8 Medium

SQL injection in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- SQL injection
Not analysed yet 13 Jan 2026
CVE-2023-48786 CVE record

CVSS 4.1 Medium

Server-side request forgery in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Server-side request forgery (SSRF)
Not analysed yet 10 Jun 2025
CVE-2024-32119 CVE record

CVSS 4.6 Medium

Weak authentication in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Authentication bypass
Not analysed yet 10 Jun 2025
CVE-2025-22859 CVE record

CVSS 5.0 Medium

Path traversal in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Path traversal
Not analysed yet 13 May 2025
CVE-2025-22855 CVE record

CVSS 2.6 Low

Cross-site scripting in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Cross-site scripting (XSS)
Not analysed yet 8 Apr 2025
CVE-2019-16149 CVE record

CVSS 5.4 Medium

Cross-site scripting in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2025
CVE-2024-23106 CVE record

CVSS 7.7 High

Unlimited authentication attempts in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Authentication bypass
Not analysed yet 14 Jan 2025
CVE-2024-36506 CVE record

CVSS 3.5 Low

Fortinet FortiClientEMS: An improper verification of source of a communication channel vulnerability [CWE-940] in…
- Fortinet FortiClientEMS
- CWE-940
Not analysed yet 14 Jan 2025
CVE-2024-36510 CVE record

CVSS 4.9 Medium

Fortinet FortiClientEMS: An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0…
- Fortinet FortiClientEMS
- Fortinet FortiSOAR
- CWE-204
Not analysed yet 14 Jan 2025
CVE-2024-21753 CVE record

CVSS 5.5 Medium

Path traversal in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Path traversal
Not analysed yet 10 Sept 2024
CVE-2024-31489 CVE record

CVSS 6.4 Medium

Improper certificate validation in Fortinet FortiClientMac and others
- Fortinet FortiClientMac
- Fortinet FortiClientEMS
- Weak cryptography or TLS
Not analysed yet 10 Sept 2024
CVE-2024-33508 CVE record

CVSS 6.9 Medium

Command injection in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Command injection
Not analysed yet 10 Sept 2024
CVE-2023-47534 CVE record

CVSS 8.7 High

CSV injection in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Other injection
Not analysed yet 12 Mar 2024
CVE-2023-48788 CVE record

CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

SQL injection in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- SQL injection
Not analysed yet 12 Mar 2024
CVE-2023-45581 CVE record

CVSS 7.9 High

Improper privilege management in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Privilege escalation
Not analysed yet 15 Feb 2024
CVE-2021-44172 CVE record

CVSS 3.6 Low

Information disclosure in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- Information disclosure
Not analysed yet 13 Sept 2023
CVE-2021-36189 CVE record

CVSS 6.8 Medium

Fortinet FortiClientEMS: A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and…
- Fortinet FortiClientEMS
Not analysed yet 9 Dec 2021
CVE-2021-41030 CVE record

CVSS 5.4 Medium

An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing use…
- Fortinet FortiClientEMS
Not analysed yet 8 Dec 2021
CVE-2020-15940 CVE record

CVSS 4.1 Medium

An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated attacker to inject malicious script/tags via…
- Fortinet FortiClientEMS
Not analysed yet 2 Nov 2021
CVE-2021-24019 CVE record

CVSS 8.1 High

An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attacker to reuse the unexpired admin user session IDs to gain adm…
- Fortinet FortiClientEMS
Not analysed yet 6 Oct 2021
CVE-2020-15941 CVE record

CVSS 5.4 Medium

A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete…
- Fortinet FortiClientEMS
Not analysed yet 6 Oct 2021
CVE-2020-9287 CVE record

CVSS 7.5 High

Untrusted search path in Fortinet FortiClientEMS
- Fortinet FortiClientEMS
- CWE-426
Not analysed yet 15 Mar 2020